Web Apps and access control

[draw]

The posts above gives also an answer to a question I asked a while back:

@draw

What is not clear for me: is it in this example in practice that more secure if I went for a private container, like e.g. _documents instead of _public? That means more work (en- and de-crypting the entry value), but if you don’t know the address (xor name) of my Public container, it doesn’t matter I think? So if really not secure enough: can someone hack my todolist and tell me the contents

But for this security to work, you have to check really well which access you give to which app in the Safe Browser:

Also in Safe Browser for the Safesites → ‘WebIdManager Permissions’ I only see ‘_public(Names)’ and ‘App’s own containers’ for Safe sites available now.